Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/387CFC8CB53211F1A3F79FC95011F970.roa
File:                     387CFC8CB53211F1A3F79FC95011F970.roa (raw, json)
Hash identifier:          9RU4NC4GOwe0MSqyLPNSykxJNhzsYTqRRIbYRGwrGLY=
Subject key identifier:   EF:48:37:52:F0:CB:8E:8D:74:33:40:27:BC:4B:30:F3:C5:09:65:90
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       1150
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/387CFC8CB53211F1A3F79FC95011F970.roa
Signing time:             Sun 20 Sep 2026 20:31:13 +0000
ROA not before:           Sun 20 Sep 2026 20:31:13 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     154517
IP address blocks:        14.192.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 14:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4432 (0x1150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Sep 20 20:31:13 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6ab04291-ac5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:4f:44:ee:33:c5:6b:15:6a:80:42:34:15:
                    79:4f:0b:53:22:60:1b:65:77:33:a3:d7:23:b4:19:
                    15:2e:00:d1:be:ee:4e:0c:ec:ff:8d:0b:32:96:9b:
                    d8:0a:75:01:4b:98:12:20:30:bc:68:9f:4e:28:bd:
                    36:a3:e3:9f:64:5c:3f:e0:87:d2:7f:21:79:88:7e:
                    b5:e0:4b:5e:86:b6:e1:88:bb:4c:a1:54:f6:93:28:
                    4a:f2:d9:c1:19:79:79:d8:b6:af:e8:81:fb:cc:6b:
                    37:cb:d9:cf:5f:7c:c0:c8:b6:58:be:f0:4d:d0:e9:
                    5b:2e:e7:a3:11:00:db:a4:47:6b:11:c6:2a:6b:ab:
                    47:c4:5f:d4:06:75:6a:8a:33:ac:72:e0:54:7a:7a:
                    79:46:31:39:7d:c9:11:68:5d:97:2c:0d:87:a5:06:
                    b2:fd:45:8f:60:2b:55:14:8e:ef:42:da:45:f1:d3:
                    e4:3d:a7:27:0b:22:42:83:f5:76:7f:8c:3b:5c:d4:
                    82:80:32:c5:15:f3:e5:c6:1c:87:13:f7:32:d7:ae:
                    10:d6:fe:bb:4e:cb:79:cb:39:25:92:0d:a8:e0:fa:
                    d2:1a:a0:12:c2:f7:2c:b3:3a:db:c1:ae:d0:de:09:
                    1c:21:46:31:94:d6:0b:8f:0c:76:f1:ad:47:e2:c5:
                    d4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:48:37:52:F0:CB:8E:8D:74:33:40:27:BC:4B:30:F3:C5:09:65:90
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/387CFC8CB53211F1A3F79FC95011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:1a:f9:03:a5:4e:3c:ad:30:50:6a:46:93:b0:0f:dd:2a:af:
         9b:a4:b8:9f:29:38:ae:66:e7:8a:1b:85:59:af:59:69:61:99:
         05:16:84:14:d7:8b:6d:4c:72:70:c6:f9:3b:a9:2d:1f:d8:44:
         ac:1b:19:b3:c3:ac:10:52:99:38:a1:94:af:b6:ad:8e:0c:e4:
         82:12:27:34:d3:7e:2c:fb:19:32:4b:47:26:f1:9a:0a:6c:34:
         b4:70:7e:e4:72:41:b5:73:23:c0:e4:b9:69:e6:76:91:d7:c6:
         23:bc:ba:20:14:19:83:ef:ba:95:4b:3a:06:ae:31:00:07:ec:
         2c:70:d5:38:14:76:6d:be:2b:98:f8:56:19:a8:d6:2e:66:30:
         8c:68:c9:4f:15:f0:5d:8c:64:91:0e:0b:9d:00:55:de:9f:9b:
         32:88:21:3e:71:b9:b9:ef:e1:a0:4a:8a:20:ee:a2:5b:c7:de:
         da:fa:13:5a:14:5d:2f:d7:83:d2:94:ab:92:3f:77:53:2a:11:
         cb:4a:1d:99:21:25:d1:f4:87:ac:69:25:65:a7:f5:03:eb:1e:
         37:aa:c8:bd:22:21:b0:36:5c:4d:24:75:19:67:d7:bf:f7:48:
         5f:6b:fe:88:04:b7:71:40:45:f7:d3:3b:4c:a2:83:9f:38:0c:
         7b:84:c3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:31:39 2026 by rpki-client